Error: rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
File:                     1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft (raw, json)
Hash identifier:          8RQPKPm6iVMo6UrM+SQSaeTlNnSR+WQf62u9WDQvpcg=
Subject key identifier:   8B:AF:D4:E7:7C:CC:0F:9A:3D:5C:BC:51:15:A4:06:5C:9C:7A:8C:E2
Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Certificate issuer:       /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Certificate serial:       1D51B198A4591C75A794419C63351129D245E6A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
Manifest number:          04BE
Signing time:             Tue 13 Oct 2026 10:48:44 +0000
Manifest this update:     Tue 13 Oct 2026 10:43:44 +0000
Manifest next update:     Wed 14 Oct 2026 10:49:44 +0000
Files and hashes:         1: 323830343a373463343a3a2f33322d3334203d3e20323731303032.roa (hash: XRfaZAGE2aiRPQDDDaWCkaGtRgdQwQaglXpduY15+84=)
                          2: 3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (hash: 1JjvDk48vxUfG8AKAqXTTRZ9oqfMLXbHB5O7sxtDrKQ=)
                          3: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl (hash: qlxpDLvX2XUKNO0VXdGNKTHwKkN9TARY7r8VMncAy5Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
                          rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:b1:98:a4:59:1c:75:a7:94:41:9c:63:35:11:29:d2:45:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Validity
            Not Before: Oct 13 10:43:44 2026 GMT
            Not After : Oct 14 10:49:44 2026 GMT
        Subject: CN=8BAFD4E77CCC0F9A3D5CBC5115A4065C9C7A8CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:5c:10:86:41:2b:3e:40:a4:19:ae:69:9c:
                    80:ce:84:0f:8d:aa:17:69:87:8b:65:2e:a4:75:ef:
                    85:ac:d4:8f:d5:3f:5e:3f:ec:31:26:bd:ff:e8:a5:
                    5a:6c:20:bc:0f:4b:b0:4b:a8:e1:4f:b8:77:71:ff:
                    30:25:4c:8e:12:12:b0:84:ae:88:00:f2:3e:23:8c:
                    77:f4:63:8a:d9:ec:08:fe:e8:fb:07:3e:93:c3:60:
                    c8:26:cb:fd:6f:01:91:f4:fd:d0:97:16:59:ed:04:
                    a1:7c:4f:31:40:f9:64:41:e2:bc:e0:39:ab:a6:2e:
                    5c:58:43:a3:7a:b6:83:fc:dd:0c:65:20:84:b6:3d:
                    7f:7d:29:68:f0:18:62:06:1c:c7:c3:6f:9e:3c:21:
                    f1:e5:97:4f:16:7c:78:4b:b6:43:d0:1e:6b:3f:d4:
                    e5:05:18:fa:d3:cc:23:0b:07:70:42:5a:83:6b:4b:
                    3e:66:99:47:14:67:de:6a:02:0f:dd:b3:b8:69:18:
                    0a:92:77:a1:23:ee:d7:d4:8e:05:f9:86:f2:28:e7:
                    c6:81:a3:3e:55:27:46:f5:34:c9:44:09:3c:cd:ed:
                    56:be:49:43:a6:d5:fc:8b:19:e8:e0:36:db:23:e9:
                    ee:95:9d:71:a2:6d:80:d8:63:9e:57:50:48:6e:07:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AF:D4:E7:7C:CC:0F:9A:3D:5C:BC:51:15:A4:06:5C:9C:7A:8C:E2
            X509v3 Authority Key Identifier:
                keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:6c:16:20:5e:7f:60:52:1a:96:63:0f:0a:2b:c4:7f:b0:
         6e:3a:d3:35:84:fc:83:3d:96:cf:a9:48:b6:c7:23:f5:c7:40:
         f1:ee:78:a2:8c:34:4a:d8:07:67:1f:12:20:ea:c2:a8:df:66:
         0c:55:6a:73:cb:da:11:53:4f:92:6b:34:b8:ba:7d:68:1a:4c:
         0e:74:55:3c:4e:ac:6e:98:fd:18:4b:43:75:7b:29:27:57:00:
         e5:39:98:7b:b7:3b:a5:75:23:1d:89:97:05:fd:4a:5d:b7:54:
         cf:77:a7:f2:b1:ea:22:e2:af:db:c4:a8:fa:35:10:82:f5:51:
         f9:ee:aa:3d:51:a9:7e:f2:54:60:92:9e:fa:1a:fb:8a:4a:79:
         16:fc:a5:5e:e7:84:72:7c:84:ad:86:b6:af:8a:4e:73:dd:1a:
         5f:4d:58:13:f6:b4:e6:8d:51:d7:eb:4f:08:e1:6d:a7:fb:f3:
         53:06:ce:ac:ab:21:33:1f:7e:50:25:d4:40:13:22:3d:32:de:
         53:73:80:27:cd:cc:2e:8d:3c:96:3a:85:15:3f:e0:a9:6f:b4:
         65:77:4a:80:48:48:8d:79:27:32:ac:df:60:cd:69:90:06:04:
         5e:57:c4:8d:13:35:09:bd:83:e3:ca:44:c6:a9:9b:45:68:50:
         ec:62:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:21:00 2026 by rpki-client